CVE-2023-39661

CriticalCVSS 9.8

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.17%

63th percentile - higher than 63% of all known CVEs

An issue in pandas-ai versions 0.9.1 and earlier allows a remote attacker to execute arbitrary code via the _is_jailbreak function.

An attacker could exploit this vulnerability to gain control over the system, posing a significant security risk to the organization.

It is recommended to update pandas-ai to a version newer than 0.9.1 to mitigate this vulnerability.

Original NVD description (English source)

An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary code via the _is_jailbreak function.